Continuous Variable Quantum State Sharing via Quantum Disentanglement 
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Quantum state sharing is a protocol where perfect reconstruction of quantum states is achieved with in- 
complete or partial information in a multi-partite quantum network. Quantum state sharing allows for secure 
communication in a quantum network where partial information is lost or acquired by malicious parties. This 
protocol utilizes entanglement for the secret state distribution, and a class of "quantum disentangling" protocols 
for the state reconstruction. We demonstrate a quantum state sharing protocol in which a tripartite entangled 
state is used to encode and distribute a secret state to three players. Any two of these players can collaborate to 
reconstruct the secret state, whilst individual players obtain no information. We investigate a number of quantum 
disentangling processes and experimentally demonstrate quantum state reconstruction using two of these proto- 
cols. We experimentally measure a fidelity, averaged over all reconstruction permutations, of T = 0.73 ± 0.02. 
A result achievable only by using quantum resources. 
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I. INTRODUCTION 

The advent of quantum information science has heralded 
the birth of two exciting new fields of research in quantum 
mechanics: quantum computation and quantum information 
networks 1 1]. Quantum computation involves computation via 
quantum mechanical techniques, using quantum states known 
as qubits, to outperform conventional computers for certain 
computational problems ^ |3|- Quantum information net- 
works, the quantum analogy of the internet, are expected to 
consist of nodes, where information is processed and stored, 
connected by quantum channels, through which quantum in- 
formation can be transmitted. Both quantum computation and 
quantum information networks share several key similarities, 
as they are both concerned with the creation, processing and 
distribution of quantum states. They are, however, both vul- 
nerable to the loss or destruction of quantum states: through 
de-coherence, node or channel failures, or the intervention of 
malicious parties. For this reason protocols that allow for the 
secure and robust distribution of quantum states are vital for 
the successful implementation of these protocols. 

In computer science, Shamir |4] proposed secret sharing 
as a protocol that enables the secure distribution of classical 
information in networks. Secret sharing can be used to en- 
hance the security of communication networks such as the in- 
ternet, telecommunication systems and distributed computers. 
Quantum resources allow the extension of secret sharing into 
the quantum domain in one of two ways. The first involves 
using quantum resources to enhance the security of classical 
information in crypto-communication systems, and is known 
as quantum secret sharing 011^0]. The second uses quantum 
resources to securely encode and distribute quantum states. 
This second class, which we term quantum state sharing to 
distinguish from the first class of protocols, is of more signif- 
icance to quantum information protocols, which are primarily 
concerned with quantum states. In (fc, n) threshold quantum 
state sharing, originally proposed by Cleve et al. |8], a se- 
cret state is encoded by the "dealer" into an n-party entangled 



state or "share". Any k players (the authorized group) can col- 
laborate to retrieve the quantum state, whereas the remaining 
n— fc players (the adversary group), even when conspiring, ac- 
quire nothing. As a consequence of the no-cloning theorem, 
the number of players in the authorized group must consist 
of a majority of the players, (fc > n/2). For quantum com- 
putation and quantum information networks, quantum state 
sharing provides a secure framework for distributed quantum 
communication, protecting the quantum states from the loss 
up to n — fc shares due to destruction, failures, or malicious 
conspiracies. 

In general, most theoretical proposals for quantum state 
sharing, by Cleve et al. and other subsequent theoreti- 
cal proposals sua El 1121, are formulated for the discrete 
regime. These proposals require qudits (multi-dimensional 
qubits) for the encoding and distribution of the secret quan- 
tum states. Experimentally, however, the control and cou- 
pling of qudits is extremely challenging, making an exper- 
imental demonstration of quantum state sharing in the dis- 
crete regime a difficult task. Recently, Tyc and Sanders flsll 
extended quantum state sharing to the continuous variable 
regime. Their proposal utilizes Einstein-Podolsky-Rosen 
(EPR) entanglement, an experimentally accessible quantum 
resource 1 14, 15], which has been used in several quantum 
information protocols including quantum teleportation 1 16], 
quantum dense coding ] 17] and entanglement swapping ] 18]. 
Importantly, Tyc et al. [19.1 . later showed that continuous 
variable quantum state sharing could be extended to a (fc, n) 
threshold scheme, without a coiTesponding scale up in quan- 
tum resources. This makes quantum state sharing an impor- 
tant and powerful security protocol for future quantum infor- 
mation systems. 

In this paper we experimentally demonstrate (2, 3) thresh- 
old quantum state sharing in the continuous variable 
regime ]20]. In our scheme, a secret coherent state is encoded 
into a tripartite entangled state and distributed to three play- 
ers. In general, arbitrary quantum states can be shared via 
quantum state sharing. Experimentally we demonstrate quan- 
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turn state sharing using secret coherent states with unknown 
coherent amphtude and phase displacements. The coherent 
states form an over-complete basis, making it possible to in- 
fer performance for arbitrary input states from our results. We 
demonstrate that any two of the three players can form an au- 
thorized group to reconstruct the state, and characterize this 
state reconstruction in terms of fidelity (JF), signal transfer 
(T), and reconstruction noise (V). These measures show a di- 
rect verification of our tripartite continuous variable entangle- 
ment. The entangled state in the dealer protocol ensures that 
the quantum features of the secret state can be reconstructed 
by the authorized group, whilst simultaneously providing se- 
curity against individual players. We also demonstrate that 
security of our scheme can be enhanced using classical en- 
coding techniques. 

This paper is presented in the following manner, in Section 
II we describe the dealer protocol for encoding and distribut- 
ing the secret state to the players, and we describe a set of 
"disentangling protocols" that can be used to reconstruct the 
secret state by the corresponding authorized groups. In Sec- 
tion III we present techniques to characterize the state recon- 
struction. In Sections IV and V we describe the experimental 
setup and present the experimental results. Finally we con- 
clude in Section VI. 



II. (2,3) QUANTUM STATE SHARING PROTOCOLS 
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FIG. 1: Schematic of the dealer protocol for the (2, 3) quantum state 
sharing scheme, ^pin'. secret quantum state, OPA: optical parametric 
amplifier, x:y: beam splitter with reflectivity x/{x + y) and transmi- 
tivity y/{x + y), <pi optical phase delays, A'^*: additional Gaussian 
noise, Gi electronic gains. 

In this paper we consider quantum states that reside at a 
the sideband frequency, uj, of an electromagnetic field. These 
quantum states include the secret and the entangled states 
use in the dealer protocol, and can be described using the 
field annihilation operator a = {X~^ + iX~)/2. This oper- 
ator is expressed in terms of the amplitude X'^ and phase 
X^ quadrature operators, which are non-commuting observ- 
ables, described by the commutation relation [X^, X~] = 2i. 
Without loss of generality, we can express these quadrature 



operators in terms of a steady state component, and fluctuat- 
ing component as X^ — {X^) +SX^, where the variance 
and the mean of these quadrature operators are expressed as 
^ {(SX^)^) and respectively. 



A. Dealer Protocol 

For the (2, 3) quantum state sharing scheme, we extend the 
original dealer protocol proposed by Tyc and Sanders L13ll 
(Quantum Protocol in Fig. 0. In the original protocol, the 
secret state is encoded by the dealer by interfering the secret 
quantum state with one of a pair of EPR entangled beams on a 
1 : 1 beam splitter. This interference hides the secret state in the 
relatively larger amplitude and phase noise of the entangled 
beam. The two outputs from this beam splitter, and the sec- 
ond entangled beam, form the three shares to be distributed to 
the players in the protocol. The second EPR entangled beam, 
although not containing a component of the secret state, does 
share entanglement with the other two beams. This entangle- 
ment ensures that the quantum features of the secret state can 
be reconstructed. 

The security of the scheme is governed by the strength of 
the entanglement in the dealer protocol. In the case of fi- 
nite entanglement, some information of the secret state can 
still be retrieved by individual players. The security can be 
further enhanced, however, by using additional classical en- 
coding techniques in the dealer protocol. This is achieved by 
encoding correlated Gaussian noise onto each of the players 
shares (Classical Protocol in Fig. 0. We describe the ad- 
ditional Gaussian noise encoded onto the shares by SAf = 
{5N^ +iSN^)/2, which has a mean of {SN^)=Oand vari- 
ance of {{SN^)'^) — Vn- The variance of the Gaussian noise 
encoded onto the quadratures of each of the shares can be con- 
trolled via an electronic gain G (Fig.Q. The resulting shares 
after the classical encoding can be expressed as 12(1 12111 

^ptycrl = iXt^+Xip^^+SN^)/V2 (1) 

^pV2 ^ (^i^-^EPRi-'5^^)/V2 (2) 

^ptycr3 = ^EPR2±^^^ (3) 

where we have assumed that the EPR entangled beams are 
generated by interfering an phase and an amplitude squeezed 
beam on a 1:1 beam splitter with a relative optical phase shift 
of TT. The quadratures of the EPR entangled beam are given 
by 

^EPRl = (^stzl+^sqz2)/^ (4) 
-^EPR2 = (-^stzl~^stz2)/^ (5) 

where ^g^^i ^'^'^ ^sqz2 correspond to the quadratures of the 
squeezed l^eams. The variance of the squeezed quadratures of 
the squeezed beams are expressed as K,"^! = (('^^sqzi)^) < ^ 
andV+^{{SX+r)<l. 
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B. Reconstruction Disentangling Protocols 



(a) 



(b) 



playerl 



player! 




player! 



HK„u,> player! 



— Amplifier - 



IVout> 



(C) 



playerS 



playerl 




IVoi,t> 



(d) 



playerl 




l¥out> 



(e) 



player^ 



playerl ^ 




playerl 



FIG. 2: Schematic of the reconstruction protocols for the (2, 3) 
quantum state sharing scheme. For the players 1 and 2 as the au- 
thorized group: (a) Mach-Zehnder reconstruction protocol. For the 
players 1 and 3 (or players 2 and 3) as the authorized group: (b) 
Phase insensitive amplifier reconstruction protocol, (c) Two opti- 
cal parametric amplifier reconstruction protocol (d) Feed-forward re- 
construction protocol (e) Two feed-forward reconstruction protocol. 
■i/)out: reconstructed quantum state, G: electronic gain and AM: am- 
plitude modulator. Switch symbol: represents the use of either player 
1 or player 2 in the corresponding reconstruction protocols. 

For (2, 3) quantum state sharing, which is the simplest 
non-trivial quantum state sharing scheme, there exists a class 
of protocols that can be used to reconstruct the secret state. 
These reconstruction protocols can be thought of as disentan- 
gling protocols as the secret state is embedded within two 
states which are EPR entangled. This is analogous to the 
disentangling protocols in the discrete regime |22]. Some of 
these reconstruction protocols are shown in Figure|2] 



1. Mach-Zehnder Protocol 

The specific state reconstruction protocol used in the (2,3) 
quantum state sharing scheme depends on the constituent 
players which form the authorized group. The authorized 
group formed when players 1 and 2 collaborate, which we 
henceforth denote as the {1,2}, can reconstruct the secret state 
using the Mach-Zehnder protocol, as shown in Figure |2] (a). 



The { 1 ,2} authorized group completes a Mach-Zehnder inter- 
ferometer by interfering the shares on a 1:1 beam splitter The 
quadratures of the reconstructed secret are given by 
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(6) 



Since this reconstruction protocol effectively reverses the 
dealer encoding protocol, the {1,2} authorized group can re- 
construct the secret state to an arbitrary precision, independent 
of the amount of squeezing or additional Gaussian noise em- 
ployed in the dealer protocol. 

For the {1,3} and {2,3} authorized groups, more compli- 
cated reconstruction protocols are required. This complexity 
is due to the asymmetry of the entanglement and Gaussian 
noise in each of the shares in the authorized groups. 



2. Phase insensitive amplifier protocol 

The {1,3} and {2,3} authorized groups can, in theory, re- 
construct the secret state to an arbitrary precision using a 
phase insensitive amplifier. This can be achieved by carefully 
controlling the inherent noise coupled into the output state as 
a result of the amplification process, as shown in Figure|2](b). 
The output from a phase insensitive amplifier can be expressed 
by the quadrature equations 1I23I1 



X^^ 



= Vg1± t Vg^x^ 



(7) 



where G is the amplifier gain. The amplification process has 
two inputs X^ and X^. The second input X^ is coupled into 
the quadratures of the output state as a result of the amplifi- 
cation process. Typically, this second input corresponds to 
the quadratures of a vacuum state. For a general phase insen- 
sitive amplifier, however, this second input can be arbitrary. 
We utilize this second input in the phase insensitive amplifier 
reconstruction protocol. In this protocol, share {1} (or {2} 
depending on the corresponding authorized group) is ampli- 
fied using the phase insensitive amplifier. By replacing the 
amplifier noise coupled into the output state with share {3}, 
the resulting quadratures of the reconstructed secret can be 
expressed as 




(8) 



By setting the amplifier gain to G = 2, the quadratures of the 
reconstructed secret are given by 
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Xr 



-V2SX, 



sqzi 



(9) 
(10) 
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where 5X^^^ and SX^^_^ are the squeezed quadratures of 
the squeezed beams used to generate the entanglement in the 
dealer protocol. At an amplifier gain of G = 2, it is seen 
that in the limit of infinite squeezing, the secret state is re- 
constructed to an arbitrary precision without degradation. We 
term this point the unity gain point (ana log ous to the unity 
gain point in quantum teleportation fl6, At the unity 

gain point the expectation value of the quadrature amplitudes 
of the reconstructed state is the same as the secret state. Fur- 
thermore, the noise contributions do not appear on the quadra- 
tures of the reconstructed state. As a result, the security of the 
scheme can be arbitrarily increased by either increasing the 
squeezing or the additional noise in the dealer protocol, with- 
out degrading the quality of the reconstructed state. We point 
out the significance of the unity gain point, as all the recon- 
structions protocols presented in this paper can achieve some 
form of unity gain. Although in theory, this reconstruction 
protocol can be used to reconstruct the secret to an arbitrary 
precision, experimentally it is extremely difficult to directly 
access the second input field of the phase insensitive amplifier 
We now turn our attention to examining more experimentally 
achievable reconstruction protocols. 



the reconstruction protocol. Furthermore, in the reconstruc- 
tion protocol these optical parametric amplifiers must have 
precisely controlled amplifying gains as well as high non- 
linearity. Experimentally, high non-linearity can be achieved 
by using high peak power pulsed light sources, either in Q- 
switched or mode-locked setups, or by enhancing the optical 
intensity within an optical resonator However, both of these 
techniques cause significant coupling of vacuum fields into 
the output state, resulting in a significant decrease of quantum 
efficiency. The pulsed systems often suffer distortion of op- 
tical wave fronts in the non-linear medium, resulting in poor 
optical interference and losses, whilst the resonators couple 
in vacuum fields via intra-resonator losses, the resonator mir- 
rors and the second harmonic pump field. For these reasons it 
is desirable to investigate reconstruction protocols that do not 
rely on optical parametric amplifiers, but instead utilize linear 
optics, which are not susceptible to these type of losses and 
inefficiencies. 



4. Single feed-forward reconstruction protocol 



3. Two optical parametric amplifier protocol 

In their original proposal, Tyc and Sanders suggested using 
a pair of optical parametric amplifiers to perform the {1,3} 
and {2,3} secret reconstructions 1 13|, as shown in FigureQc). 
We term this protocol the two optical parametric amplifier 
protocol. In this protocol, the two shares are interfered on a 
1:1 beam splitter. The two resulting beams are each noise- 
lessly amplified using phase sensitive optical parametric am- 
plifiers, with amplifying gains of VG and 1/VG respectively. 
After the noiseless amplification, the secret state is recon- 
structed by interfering the two amplified beams on a second 
1 : 1 beam splitter The quadrature of the reconstructed secret 
can be expressed by 

I , rrz 1 
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(11) 

(12) 



where G is the amplifying gain of the optical parametric am- 
phfiers, and the coefficients G^ are given by 



(13) 



At an amplifying unity gain of G = ( V2 + 1)/(V2 - 1), the 
quadratures of the reconstructed state can be expressed as 
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(14) 
(15) 



In the limit of infinite squeezing in the dealer protocol and 
at unity gain, the secret state is reconstructed to an arbi- 
trary precision. This scheme requires significant quantum re- 
sources, however, with two optical parametric amplifiers in 



An alternative reconstruction protocol that uses linear op- 
tics and electro-optic feed-forward to reconstruct the secret 
state 1 20, 21] is shown in Figure |2](d). We term this protocol 
the single feed-forward reconstruction protocol. In this pro- 
tocol the shares are interfered on a beam splitter, where the 
two resulting output beams are denoted as h and c. The pro- 
portion of entanglement and additional noise between share 
{3} and share {1} (or {2}) are not equal, hence, an appropri- 
ate beamsplitter ratio must be chosen so that the entanglement 
and additional noise contributions are proportional on one of 
the quadratures of the beam splitter output & as a result of this 
interference. In the limit of infinite squeezing or additional 
noise in the dealer protocol, the optimum beam splitter ratio 
is 2: 1 (for convenience we will use this beam splitter ratio for 
the rest of this analysis unless otherwise stated). This inter- 
ference reconstructs the phase quadrature of the secret state 
on the phase quadrature of beam splitter output h. As a result 
of this interference the amplitude quadrature X^ obtains ad- 
ditional noise fluctuations. It is possible to cancel the noise 
on the amplitude quadrature X^ , however, by recognizing 
that this noise is correlated with the noise on the amplitude 
quadrature By detecting and imparting these fluc- 
tuations onto X^ with a well chosen electronic gain G via an 
electro-optic feed-forward loop, it is possible to reconstruct 
the amplitude quadrature of the secret state. After the electro- 
optic feed-forward, the quadratures of the reconstructed secret 
can be expressed as 



x: 



-l)'5lj 



V2 



^(V3-5+)^X-,, + (V3-g+)<5iV+ (16) 



n/3 



(Xr^ + ^5X;^J 



(17) 
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where denotes the optical quadrature gains of the recon- where the coefficients represent the corresponding squeezing 
structed secret, given by = {X^^^)/(X^). The phase operators A+ = SX+ Ar ^X;; B+ = 5X. 



quadrature gain is set by the reconstruction beam splitter ra- 
tio 2:1 to be g^ = l/\/3, whilst the amplitude quadrature 
gain (7+ = 1/ \/3 + G/\/6 has an additional contribution due 
to the feed-forward process, which is a function of the elec- 
tronic gain G. We refer to the optical quadrature gain product 
g^g^ — (\/3)(l/\/3) = 1 as the unity gain point. At unity 
gain, the quadratures of the reconstructed secret are given by 



sqZ2 



and 



X+t = V3{X+ + V26X+J 



(18) 
(19) 



In the limit of infinite squeezing in the dealer protocol, the 
reconstructed secret is directly related to the secret state via 
a local unitary parametric operation. This reconstructed state 
can only be achieved using quantum resources. If required, a 
reverse local unitary parametric operation, can be applied to 
the reconstructed state to transform the reconstructed secret 
state into the original form of the secret state. Since this uni- 
tary parametric operation is a local operation and requires no 
entanglement, this shows the quantum nature of the state re- 
construction is contained within the feed-forward reconstruc- 
tion protocol, and not by the subsequent operations. 



5. Double feed-forward reconstruction protocol 

Although the single feed-forward protocol is sufficient for 
demonstrating the quantum nature of quantum state sharing, 
it could be inconvenient in practice if the reconstructed state 
is a unitary transform of the secret state. It is useful to in- 
vestigate alternative feed-forward protocols where the recon- 
structed state is in the same form as the secret state. Such 
a reconstruction protocol is shown in Figure |2](e), which we 
term the double feed-forward reconstruction protocol. In this 
protocol, share { 1 } (or {2}) is interfered with a vacuum state 
on a beam splitter. The reflectivity of the beam splitter has 
to be optimized, and in the limit of infinite squeezing or ad- 
ditional Gaussian noise in the dealer protocol, the optimum 
beam splitter ratio is 1 : 1 (For convenience we will use this 
beam splitter ratio for the rest of this analysis unless other- 
wise stated). The resulting output beam b is then interfered 
with share {3} on a 1:1 beam splitter. The resulting beams are 
denoted by d and e respectively. The noise fluctuations on the 
amplitude quadrature X^ and phase quadrature X^ are corre- 
lated with the amplitude and phase quadrature fluctuations on 
beam c respectively. The secret state can be reconstructed by 
measuring the X^ and X^ quadrature fluctuations, and dis- 
placing the corresponding quadratures of beam c with a prop- 
erly chosen electronic gain. The resulting quadratures of the 
reconstructed state are given by 



X' 



1 



il-g+)6N+ + ^il~g+)A 
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(20) 



B — (JXgqzj , the optical quadrature gains are defined as = 
(l-G/%/2)/2, and where is the vacuum noise. At unity 
gain (g^ = 1), the quadratures of the reconstructed secret state 
can be expressed as 



x: 



X: 



-V2<5X^ 



(21) 
(22) 



In the case of infinite squeezing in the dealer protocol and 
at unity gain, the secret state is reconstructed to an arbitrary 
precision. This protocol has advantages over the previous pro- 
tocols as it uses linear optics to reconstruct the secret state and 
the reconstructed state is in the same form as the secret state. 



in. CHARACTERIZATION OF QUANTUM STATE 
RECONSTRUCTION 



We characterize state reconstruction in quantum state shar- 
ing by measuring the fidelity between the secret and recon- 
structed states (T), which is used in the characterization quan- 
tum teleportation experiments |16, 24]. We also character- 
ize the state reconstruction by measuring the signal transfer 
from the secret to the reconstructed state (T) and the ad- 
ditional noise on the reconstructed state (V), which is used 
to characterize quantum teleportation ll24ll and quantum non- 
demolition experiments L25ll . 



A. Fidelity 

Fidelity measures the overlap between the secret and recon- 
structed states, and can be expressed in terms of the input and 
the output state ■&& T — (V'injpoutlV'in) |26|. A fidelity of 
T =\, implies perfect overlap between the secret and recon- 
structed states and corresponds to state reconstruction with ar- 
bitrary precision, whilst a fidelity of = implies no overlap 
between the corresponding states. 

In quantum state sharing the secret state can be any state 
in general. In our experiment we use coherent states with un- 
known amplitude and phase coherent amplitudes. As a con- 
sequence we limit our analysis here to coherent states. The 
fidelity between a secret state and the reconstructed state for a 
general quantum state sharing scheme, assuming that all states 
have Gaussian statistics, can be expressed as 



T = 



2g-(fc+4*-)/4 

y^(i+y+t)(i+K^ 



(23) 



where fc± = (^i^)'(l - 3^)7(1 + K^t) and K± are the 
quadrature variances of the reconstructed state, and where g^ 
are the optical quadrature gains. Since fidelity is a measure of 
the overlap between the input and the output state, the most 
significant fidelity measure is at unity gain g^ = \. This is 
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seen as the fidelity, averaged over an ensemble of unknown 
states, falls exponentially as we move away from unity gain. 

We now determine the maximum fidelity achievable by the 
authorized group in the case when the squeezed states are re- 
placed with coherent states in the dealer protocol, which we 
term the classical fidelity limit. The quadrature equations for 
a general reconstructed state can be expressed as 



-XI 



(24) 



where are the reconstruction noise terms on the quadra- 
tures of the reconstructed state. To measure the fidelity of 
this reconstructed state at unity gain, we assume that a phase 
insensitive amplification can be applied to the reconstructed 
state to achieve unity gain. Assuming that the optical quadra- 
ture gains on both quadratures are equal — g, and for 
a phase insensitive amplification with an amplifying gain of 
1 /g, the resulting quadrature equations are given by 



can only be exceeded using quantum resources. The average 
classical fidelity achievable for a general (fc, n) quantum state 
sharing scheme can also be calculated. Assuming that the se- 
cret is a coherent state it is straightforward to show that the 
average classical fidelity is given by T^l^g < k /n. 

Similarly for the individual players, the maximum achiev- 
able classical fidelity limits are given by 



clas 

{1} 

-T-clas 
■^{3} 



^{2} ^ 1/2 







(30) 



For large squeezing or additional noise in the dealer protocol, 
the fidelity for the individual players approaches zero, corre- 
sponding to no overlap between the secret state and the indi- 
vidual shares. 



B. Signal Transfer and Additional Noise 
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where X^ is the noise coupled into the output state as a result 
of the amplification process. By using the commutation rela- 
tion [X^ , Xj'] — 2iSij and the Heisenberg uncertainty product 

inequality V^'^Vf > | X^^]) P/4, we can obtain Heisen- 
berg uncertainty products for the noise terms in Equations J24> 
and i25i expressed as 



(26) 



V+V^>\{l-g')/{g')f (27) 

By substituting Equations i25\ . (I26> and i27\ into fidelity 
Equation i23\ . the maximum classical fidelity for a general 
reconstructed state is given by 



^clas ^ 



1 



1 + I(1-<7WI 



(28) 



Using this inequality, we can determine the maximum classi- 
cal fidelity achievable by the authorized groups for the (2, 3) 
quantum state sharing scheme. From the individual player 
shares. Equations Q, (|2j and (|3}, the quadrature gains for 
{1,2} access group are — 1, whilst the quadrature gains for 
{1,3} and {2,3} access group are g^ = 1/ \/2. By substituting 
these gains into Equation ( I28> . the maximum classical fidelity 
for the authorized groups are given by 
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(29) 



The average classical fidelity limit for the quantum state shar- 
ing scheme can be determined by averaging the maximum 
classical fidelity achievable by all the authorized groups. For 
the (2, 3) quantum state sharing scheme, the average classical 
fidelity is .F^i- < (.F{i,2}+.F{i^3}+^{2,3})/3 = 2/3. This limit 



In quantum state sharing, the state reconstruction can also 
be characterized in terms of the signal transfer to (T) and ad- 
ditional noise on (V) the reconstructed state. These measures 
provides complementary information about the state recon- 
struction compared with the fidelity measure. Perfect state 
reconstruction corresponds to T = 2 and V = 0, whilst T = 
and V = oo implies that no information has been obtained 
about the secret state. The spacial difference between the T 
and V points, for the access and adversary groups, illustrates 
the information difference about the secret state obtained by 
both groups. Unlike fidelity, which requires the reconstructed 
state to be in the same form as the secret state, both T and 
V are state independent measures and are invariant to unitary 
transformations of the reconstructed state. 

The signal transfer function is given by the sum of the 
quadrature signal transfer coefficients as 



T = T^ 



Rr 



(31) 



where R^ are the quadrature signal-to-noise ratios. In the 
case of zero squeezing in the dealer protocol, using Equa- 
tion i2bi . the signal transfer for a general reconstructed state, 
Equation ( I24> . is limited by the inequality 
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The additional noise on the reconstructed state (V) is given by 
product of the quadrature conditional variances, which can be 
expressed as 



V = v\ v.~, 

m|out injout 



(33) 



where the quadrature conditional variances each describe the 
amount of additional noise on each quadrature of the secret 
state and can be expressed in the standard form V^j!l„„t — 



-{{SX, 



± 

out 



hf^SX^J'^), where the gains /i? are opti- 



mized, giving minimum conditional variances of 



^y±_mtsx^^,) 



(34) 
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For a general reconstructed state described by Equation i24l . 
and assuming that the secret is a coherent state, the quadrature 
conditional variances can be written in an alternative form as 
V 



± 

in|out 



(^Dut ~i9^)'^)- The minimum additional noise on 



the reconstructed state is limited by the inequality 

v>|i-<?Vl' 



(35) 



For our (2,3) quantum state sharing protocol, we determine 
the classical limits for T and V for the authorized groups. The 
{1,2} authorized group can obtain a maximum signal transfer, 
and a minimum additional noise of 



^clas 
^{1,2} 

■\ iclas 
•^{1,2} 



< 2 
> 



(36) 



which corresponds to state reconstruction to an arbitrary pre- 
cision. For the {1,3} and {2,3} authorized groups, the maxi- 
mum achievable signal transfer, and the minimum achievable 
additional noise is given by 



/T-clas 
^{1,3} 
A iclas 
•^{1,3} 



-T-clas 
^{2,3} 



< 1 



= V 



iclas 
{2,3} 



> 



1/4 



(37) 



For no squeezing in the dealer protocol, the {1} and {2} ad- 
versary groups can reach the equality given in Equation i37l . 
As either the squeezing or additional Gaussian noise is in- 
creased in the dealer protocol, however, the amount of in- 
formation the adversary group obtains approaches zero. In 
the limit of infinite squeezing, or large amounts of additional 
noise, the adversary groups obtains no information about the 
secret state, corresponding to T = and V = 00. 



Figures |3] and 13 show the accessible T and V regions for 
the {1,3} and {2,3} authorized groups using the single feed- 
forward reconstruction protocol, with and without squeezing 
in the dealer protocol. The accessible points for the corre- 
sponding {2} and {1} adversary groups are also shown. To 
map out these accessible regions, the authorized group vary 
both the electronic feed-forward gain, and the beam splitter 
reflectivity in the reconstruction protocol. In Figure |3j for 
no squeezing in the dealer protocol, the authorized group can 
achieve the classical limits set in Equation (I37> . Figure |3 
shows that in the limit of ideal squeezing, the authorized group 
can achieve state reconstruction to an arbitrary precision. 




T T 

FIG. 3: Signal transfer (T) and additional noise (V) for the single feed-forward reconstruction protocol, with no squeezing in the dealer 
protocol, (a) Accessible regions for the {2,3} (and {1,3}) authorized groups, and (b) accessible points for the {1} (and {2}) adversary group, 
for increasing additional Gaussian noise in the dealer protocol of (i) Vn = (ii) Vn ~ 0.25 (iii) Vn = 1-13 and (iv) Vn ~ 3.06, normalized to 
the quantum noise limit. Grey square: unity gain point for the authorized group reconstruction protocol. Grey circles: corresponding adversary 
group points. 



IV. EXPERIMENTAL SETUP 

A. Dealer Protocol 

We use a Nd:YAG laser producing 1.2 W of laser light at 
1064 nm. Approximately 0.8 W of this laser light is coupled 
into a hemilithic MgO : LiNb03 second harmonic generator. 



producing approximately 0.4W of frequency doubled light at 
532nm. 

The remaining light from the laser is coupled into a high 
finesse mode cleaning cavity. This cavity serves as stable fre- 
quency reference, to which the laser is locked. The output 
beam is quantum noise limited above the sideband frequency 
of 2MHz. The mode cleaning cavity also "spatially cleans" 
the output mode, by only being resonant for the TEMqo trans- 
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FIG. 4: Signal transfer (T) and additional noise (V) for the single feed-forward reconstruction protocol, with increasing squeezing in the 
dealer protocol, (a) Accessible regions for the {2,3} (and {1,3}) authorized groups, and (b) accessible points for the {1} (and {2}) adversary 
group, for increasing squeezing in the dealer protocol of (i) dB (ii) — 3 dB (iii) — 6 dB and (iv) — 9 dB below the quantum noise limit, and 
with no additional Gaussian noise. 



verse electromagnetic field mode. This output beam is used to 
seed two hemilithic MgO : LiNb03 optical parametric am- 
plifiers, which are pumped with the frequency doubled light. 
The optical phase of the pump beam is controlled to produce 
amplitude squeezed beams from the optical parametric ampli- 
fiers. The amount of amplitude quadrature squeezing corre- 
sponds to —4.5 ±0.2 dB below the quantum noise limit. To 
produce EPR entangled beams, the two amplitude squeezed 
beams are interfered on a 1:1 beam splitter with a controlled 
relative optical phase shift of 7r/2. The resulting beams ex- 
hibit continuous variable entanglement between the amplitude 
and phase quadratures of the two beams. This entanglement is 
characterized using two standard measures. The first measure, 
proposed by Duan et al. |27], characterizes the inseparability 
of the two entangled wave functions and is referred to as the 
inseparability criterion. Our system satisfies the inseparabil- 
ity criterion, which can be express as 

V ^e+pri+epr2Ve"pri-epr2 = 0-44±0.01 < 1 (38) 

where Vepri±epr2 is the minimum of the normalized vari- 
ance of the sum or difference of the operators Xepri and 
X-p,\yf{ -2- A second measure proposed by Reid and Drum- 
mond [2^, referred to as the EPR criterion, is based on the 
observation of non-classical correlations which can be used to 
demonstrate the EPR paradox. Our system satisfied the EPR 
criterion which can be express as 

^e™i|epr2Wi|epr2 = 0-58±0.02<1 (39) 

where ^epri|epr2 '■^^ standard conditional variances 
given in Equation ( I34> . A more detailed analysis and dis- 
cussion of the experimental generation and characterization 
of continuous variable EPR entanglement is given in fT3\ . 

In our experiment, the secret quantum state is a displaced 
coherent state at the sideband frequency of 6.12 MHz of the 
coherent laser field. The secret state is encoded and distributed 
to the three players by interfering it with one of the EPR entan- 
gled beams on a 1:1 beam splitter with a mode-matching effi- 
ciency of ?7EPRi.in = 0.97, as shown in Figure^ To increase 



the security of the scheme, the dealer introduces additional 
Gaussian noise onto the three player shares using electro-optic 
modulation techniques. An alternative method for introducing 
this noise is to modulate the optical parametric amplifier res- 
onator cavities with Gaussian noise at the secret state sideband 
frequency. In our experiment, the Gaussian noise appears nat- 
urally as a result of de-coherence in the optical parametric 
amplifiers, resulting in mixed output states from the optical 
parametric amplifiers. These mixed states can be described 
as squeezed states with additional noise on the anti-squeezed 
quadratures. The additional noise on the EPR beams corre- 
sponds exactly to Equations Q, (|2ji and Q. Experimentally, 
the variance of this noise can be controlled to an extent by 
adjusting the power of the 532nm light used to pump the op- 
tical parametric amplifiers. Typically, the additional Gaussian 
noise has a noise variance of 3.5 dB above the quantum noise 
limit, for a corresponding amplitude quadrature squeezing of 
4.5±0.2 dB below the quantum noise limit. 

B. Reconstruction Protocols 

For the {1,2} authorized group state reconstruction, we use 
the Mach-Zehnder reconstruction protocol, as shown in Fig- 
ure |2 (a). Both players shares are interfered on a 1:1 beam 
splitter with a mode-matching efficiency of r?sharci.shaio2 — 
0.99. The output state from the beam splitter is the recon- 
structed secret state. 

For the (2,3) quantum state sharing scheme, the {1,3} 
and {2,3} authorized groups are equivalent, so that an ex- 
perimental demonstration requires the successful demonstra- 
tion of either of these protocols. For the {2,3} authorized 
group, the secret state is reconstructed using the single feed- 
forward reconstruction protocol, as shown in Figure|2](d). For 
this reconstruction protocol, the players shares are interfered 
on a 2:1 beam splitter with a mode-matching efficiency of 
?7piayer2, players = 0.97. To improvc the efficiency of the feed- 
forward loop, the optical power on the feed-forward detec- 
tor is increased so that the quantum noise limit is sufficiently 
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higher than the detector dark noise. Typically for our exper- 
iment, the dark noise on the feed-forward detector is 13 dB 
below the quantum noise limit. 

In the original proposal, the amplitude quadrature of beam 
b is directly modulated using electro-optic feed-forward tech- 
niques. This method, however, is prohibitive as amplitude 
modulators have quantum efficiencies of 50%. An alternative 
method that has a much higher quantum efficiency is to dis- 
place the amplitude quadrature of a separate strong local os- 
cillator field X^Q. This local oscillator field is then interfered 
with field 6 on a highly reflective beam splitter. The efficiency 
of this technique is equal to the beam splitter reflectivity of 
the highly reflective beam splitter. In our experiment we use 
a beam splitter ratio of 50: 1 with a mode-matching efficiency 

of 77sharo3,LO=0.96. 



C. Measuring the Secret and Reconstructed Quantum States 

Both the secret and reconstructed quantum states for the 
access and adversary groups are measured using a single bal- 
anced homodyne detector, via a configuration of removable 
mirrors. Assuming Gaussian states, the secret and recon- 
structed states are completely characterized by measuring the 
amplitude and phase quadrature noise spectra, together with 
the calibration noise spectra. After detection, the total homo- 
dyne efficiency ryhom = 0.89±0.01 is factored into each mea- 
surement. This inference ensures accurate results (this can be 
seen in the limit of poor homodyne efficiency, where all states 
measured correspond to vacuum states, resulting in state re- 
construction to an arbitrary precision by both the access and 
adversary groups, which would be obviously incorrect). Due 
to a control drift in our experimental setup, the quadrature 
noise spectra are normalized with respect to the noise of the 
secret state, which are approximately quantum noise limited at 
6.12 MHz. From these noise spectra, (X^) and ((X^)^) of 
the secret and reconstructed states are calculated respectively. 



V. EXPERIMENTAL RESULTS 
A. Experimental Fidelity Results 

Figure |5] (b) (inset) shows the measured fidelity for the 
{1,2} authorized group as a function of the optical gain prod- 
uct g+g", with -4.5±0.2 dB of squeezing and +3.5±0.1 dB 
of additional Gaussian noise in the dealer protocol. The au- 
thorized group obtains a best fidelity of ^{1.2} — 0-95±0.05 
with g^g^ — 0.92 ±0.03. The theoretical curve for the fi- 
delity as a function of optical gain product is also shown. The 
fidelity and the optical gain product for the {1,2} authorized 
group are close to unity, being slightly degraded as a result of 
experimental losses and imperfections. 

For the {2,3} and {1,3} authorized groups using the sin- 
gle feed forward reconstruction protocol, a meaningful fidelity 
measure cannot be obtained directly. This is because the re- 
constructed secret is a unitary transform of the secret state, and 
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FIG. 5: Experimental fidelity for the authorized groups, (a) Classical 
fidelity for {2,3} authorized group as a function of the optical gain 
product g^g~ ■ (b) Fidelity for {2,3} authorized group with 4.5 dB 
of squeezing in the dealer protocol. Solid fine: theoretical curve 
with 3.5 dB of additional Gaussian noise, 13 dB of electronic noise 
below the quantum noise limit and a feed-forward detector efficiency 
of 77ft — 0.93. Grey area: classical region for the authorized group, 
(inset) Fidelity for the {1,2} authorized group as a function of the 
optical gain product. Solid line: theoretical curve. 



the overlap between the secret and reconstructed state overlap 
is poor, even in the ideal case of infinite squeezing. However, 
a meaningful fidelity measure can be obtained after the uni- 
tary parametric operation SXp^^.^^ = {^/3)^^SX^^^ is applied 
to reconstructed state a posteriori. This unitary parametric 
operation can either be applied electronically to the measured 
values of the amplitude and phase quadratures of the recon- 
structed state, or optically by amplifying the reconstructed 
state using an optical parametric amplifier 

Figure|5](a) shows the measured fidelity for the {2,3} au- 
thorized group as a function of the optical gain product for 
zero squeezing in the dealer protocol. The {2,3} authorized 
group achieves a maximum fidelity of ^"^^23} ^ 0.41±0.01 
at a gain of g'^g~ — 1.00 ±0.05. Figure |5l(b) shows the 
measured fidelity for the {2,3} authorized group as a func- 
tion of the optical gain product. For — 4.5±0.2 dB of squeez- 
ing and +3.5 ±0.1 dB of additional Gaussian noise in the 
dealer protocol. Near unity gain of g'^g^ — 1.03 ±0.03, 
the {2,3} authorized group measures a best state reconstruc- 
tion of ^{2,3} = 0.62 ± 0.02. This fidelity exceeds the 
classical fidelity limit ^'^^^l^ < 1/2, which is only achiev- 
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able using quantum resources in the dealer protocol. In our 
scheme, the fidelity averaged over all authorized groups is 
^a-vg — (•^^{1,2} + 2jF|-2_3})/3 — 0.73±0.02, which exceeds 
the classical limit of ^^vg^ = 2/3. This classical limit can only 
be exceeded using quantum resources and so demonstrates the 
quantum nature of the (2, 3) threshold quantum state sharing 
scheme. 

For the corresponding adversary group {1}, the fidelity is 
calculated both with, and without, an ideal linear amplifica- 
tion applied to the reconstructed state to achieve unity gain. 
This linear amplification operation is applied to the measured 
quadratures of the adversary state electronically after the mea- 
surement, and is described by Equation \25\ . where we as- 
sume a linear amplification gain of \f2. In the case of no 
squeezing in the dealer protocol, the best fidelity achieved 
by the adversary group after amplification is ^{^ijamp ~ 
0.25 ±0.01 with a gain of 2g+ g- = 0.92 ±0.04, where the 
subscript (amp) denotes the fidelity after the a posteriori lin- 
ear amplification. In this case, however, the adversary group 
obtains a higher fidelity by not applying linear amplification 
operation, with a fidelity J^'^^' = 0.35 ±0.06 at a gain of 
g'^g~ — 0.46±0.02 achieved directly without amplification. 

For -4.5±0.2 dB of squeezing and +3.5±0.1 dB of addi- 
tional Gaussian noise in the dealer protocol, the best fidelity 
achieved by the adversary group is ^{i}amp = 0.16±0.01 at a 
gain of 2g^g^ = 1.00±0.04. Without the linear amplification 
the authorized group achieves a fidelity of ^{i} = 0.04±0.02 
at a gain of =0.50±0.02 



B. Experimental T and V Results 

Figure |5] (a) (inset) shows the measured signal transfer T 
and additional noise V for the {1,2} authorized group with 
-4.5±0.2 dB of squeezing and +3.5 ±0.1 dB of additional 
Gaussian noise in the dealer protocol. The {1,2} authorized 
group achieves a best state reconstruction of '^{1,2} = l-83± 
0.10 and V{i,2} = 0.01±0.01, which are both close to T = 2 
and V = 0, corresponding to ideal state reconstruction. 

Figure |6](b) shows the T and V points for the {2,3} au- 
thorized group for no squeezing or additional Gaussian noise 
in the dealer protocol. The points are taken from two exper- 
imental runs. The first experimental points (labeled (i)) are 
for a reconstruction beam splitter ratio of 2: 1 and for varying 
electronic feed-forward gain. The second experimental points 
(labeled (ii)) are for an optimized beam-splitter reflectivity 
of 100% and for zero electronic feed-forward gain. In this 
case the {2,3} authorized group obtains a best signal trans- 
fer of T^^'^y = 0.96 ±0.06 and lowest additional noise of 

V^'^^y = 0.24 ±0.03. These points are close to the classical 
limits described by Equations i32\ and i35\ . 

Figure |6](b) shows the measured T and V points for the 
{2,3} authorized group for —4.5 ±0.2 dB of squeezing and 
+3. 5 ±0.1 dB of additional Gaussian noise in the dealer pro- 
tocol. The points are taken for a varying electronic feed- 
forward gain, and a beam splitter ratio of 2:1. The classi- 
cally accessible region, which can only be exceeded using 
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FIG. 6: Experimental signal transfer (T) and additional noise (V) for 
the authorized groups, (a) Classical T and V for the {2,3} authorized 
group, for varying electronic feed-forward gain, (b) T and V for 
the {2,3} authorized group with —4.5 dB of squeezing in the dealer 
protocol. Solid line: theoretical curve for authorized group. Grey 
area: classical region for the authorized group, (inset) Experimental 
T and V for the {1,2} authorized group. 

quantum resources in the dealer protocol, is also shown. The 
quantum nature of our protocol is demonstrated by the ex- 
perimental points which exceed this classical region. For 
the {2,3} authorized group, we measure a best signal trans- 
fer of T{2.3} = 1.01 ±0.06 and lowest additional noise of 
V{2,3} = 0.41 ±0.11. The experimental points adhere to the 
theoretical curve, being degraded slightly due to drifts in our 
control system. 

Figure0shows the T and V points for the adversary group 
{1} for increasing squeezing and additional Gaussian noise 
in the dealer protocol. Figure shows how the security of 
the scheme against individual players is enhanced by increas- 
ing either the squeezing or additional Gaussian noise. For no 
squeezing or additional Gaussian noise in the dealer protocol, 
the adversary group can obtain equal information about the se- 
cret state as the {2,3} authorized group with Tji} = 0.96±0.06 
and V{i} = 0.24±0.03. The adversary group obtains almost no 
information about the secret state in the case of — 4.5±0.2 dB 
of squeezing and 18.6±3.8 dB of additional noise in the dealer 
protocol, with T^ij = 0.19±0.01 and V{i} = 18.7±0.6. To 
achieve this large amount of additional Gaussian noise, the op- 
tical parametric amplifiers are displaced with noise centered 
around the secret state frequency of 6.12 MHz. This demon- 
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FIG. 7: Experimental signal transfer (T) and additional noise (V) 
for the { 1 } adversary group, for increasing squeezing and additional 
Gaussian noise in the dealer protocol. Solid line: theoretical curve 
with increasing squeezing or additional Gaussian noise, (i) Experi- 
mental point with no squeezing or additional noise, (ii) Experimental 
points with squeezing of additional noise varied around —4.5 dB and 
+3.5 dB respectively (iii) and experimental point with —4.5 dB of 
squeezing and +18.6 dB of additional noise with respect to the quan- 
tum noise limit. 



strates that the amount of information the adversary group ob- 
tains about the secret can be reduced to zero by increasing 
either the squeezing or additional Gaussian noise in the dealer 
protocol. The spatial separation of the adversary group T and 
V points from that of the authorized group illustrates the in- 
formation difference about the secret state obtained by both 
parties. 



VI. CONCLUSION 

In conclusion, we have demonstrated that for the (2,3) 
threshold quantum state sharing scheme, there exists a class 



of "disentangling" protocols which can be used to reconstruct 
the secret state. We have experimentally demonstrated that 
for this scheme, any two of the three players can form an 
authorized group to reconstruct the quantum state, achiev- 
ing a fidelity averaged over all reconstruction permutations of 
0.73 ± 0.02, a level achievable only using quantum resources. 
We demonstrated that the entangled state and classical encod- 
ing techniques in the dealer protocol provide security against 
individual players, and in the case of finite squeezing in the 
dealer protocol, the security can be arbitrarily enhanced using 
classical encoding techniques. 

This demonstration of (2,3) threshold quantum state shar- 
ing can be scaled up to (fc, n) threshold quantum state shar- 
ing without increasing the number of active elements (e.g. 
optical parametric amplifiers and feed-forward devices) 1 1^. 
Although scaling up does not result in an increase in the 
number of active devices required by the players, the dealer 
does require an increasing number of two-mode squeezed 
states to hide the state being transmitted. Despite this chal- 
lenge, extending beyond three players should be possible and 
will elucidate the scaling properties of quantum state shar- 
ing. Furthermore, it may be possible to substitute one of the 
two squeezers in the dealer protocol by an electro-optic feed- 
forward and an amplifier as was done here for (2, 3) quantum 
state sharing, in which case the two-squeezer requirement 1 1^ 
could be relaxed. This implementation of quantum state shar- 
ing broadens the scope of quantum information protocols, al- 
lowing the secure and robust transfer of quantum information 
and also provides security against malicious parties or node 
and channel failures in quantum information networks. Tele- 
ported states, quantum computer output states, and quantum 
keys used in quantum cryptography can all be securely dis- 
tributed using quantum state sharing. 

The authors wish to thank Roman Schnabel, David Pulford 
and Hans Bachor for useful discussions and the support of 
the Australian Research Council, Australian Department of 
Defence and iCORE. 
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